Our AI threat analyst detects malicious packages and blogs about OSS compromises
7000 write-ups and counting Read one
Know the instant someone blocks new connections on your RDSH servers. DrainCtl monitors drain mode in real time, tracks who changed it, counts active sessions, and alerts you before capacity runs out. Includes a multi-server dashboard with Kerberos SSO, webhook and ntfy.sh notifications with granular triggers, and a 90-day audit trail. Works standalone or as a Windows Service.
License: unknown
Published: 12 days ago
Licenses
No license compliance issues
Secrets
No sensitive information found
Vulnerabilities
4 high severity vulnerabilities
Hardening
3 baseline mitigations missing
Tampering
No evidence of software tampering
Malware
No evidence of malware inclusion
INCIDENTS FOR THIS VERSION:
List of software behaviors discovered with static code analysis.
Retrieves the name of the user associated with the process. 1 search
Prevalence in PowerShell Gallery community Behavior often found in this community (Common) 1.29k packages
in community
Modifies file/directory permissions. 3 permissions
Prevalence in PowerShell Gallery community Behavior often found in this community (Common) Opens a socket listening for an incoming connection. 3 network
Prevalence in PowerShell Gallery community Behavior often found in this community (Common) Deletes files in Windows system directories. 6 file
Prevalence in PowerShell Gallery community Behavior often found in this community (Common) Changes file ownership. 3 file
Prevalence in PowerShell Gallery community Behavior uncommon for this community (Uncommon) Interacts with Microsoft .NET Framework code, types and assemblies. 1 execution
Prevalence in PowerShell Gallery community Behavior often found in this community (Common) 11.95k packages
in community
Retrieves the local computer name. 3 search
Prevalence in PowerShell Gallery community Behavior often found in this community (Common) Encrypts data using RSA with a given public key. 3 packer
Prevalence in PowerShell Gallery community Behavior uncommon for this community (Uncommon) Encrypts data using RC4 cipher. 3 packer
Prevalence in PowerShell Gallery community Behavior uncommon for this community (Uncommon) Encrypts data using Data Encryption Standard (DES). 3 packer
Prevalence in PowerShell Gallery community Behavior uncommon for this community (Uncommon)